Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2021-27074 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2021-27074

CVE-2021-27074 is an Azure Sphere unsigned code execution vulnerability. Connected documents describe the issue as an unsigned code execution flaw in Azure Sphere, with one source attributing it to incorrect code generation management in the Azure Sphere OS. Practical impact stated across sources...

CVE-2021-27080

CVE-2021-27080 is listed as Azure Sphere Unsigned Code Execution Vulnerability. Connected sources confirm affected product is Azure Sphere and describe a vulnerability that could allow unsigned code execution (with MSRC labeling it as an Azure Sphere Unsigned Code Execution vulnerability). The co...

CVE-2021-27080 Azure Sphere Unsigned Code Execution Vulnerability

...

Microsoft Issues Security Patches for 89 Flaws — IE 0-Day Under Active Attacks

Microsoft plugged as many as 89 security flaws as part of its monthly Patch Tuesday updates released today, including fixes for an actively exploited zero-day in Internet Explorer that could permit an attacker to run arbitrary code on target machines. Of these flaws, 14 are listed as Critical, an...

Azure Sphere Unsigned Code Execution Vulnerability

...

Azure Sphere Unsigned Code Execution Vulnerability

...

PT-2021-2292 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in the Azure Sphere operating system. It may allow a remote attacker to execute arbitrary code. Recommendations: At the...

Microsoft Azure Sphere 访问控制错误漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. An access control error vulnerability exists in Microsoft Azure Sphere. The following products and versions are affected:Azure Sphere...

PT-2021-2402 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in Azure Sphere operating systems. Exploitation of this issue may allow an attacker to execute arbitrary code...

Microsoft Azure Sphere 安全漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A security vulnerability exists in Microsoft Azure Sphere Unsigned. The following products and versions are affected: Azure Sphere...

CVE-2021-22299

There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...

Microsoft Azure Sphere Code Execution Vulnerability

Microsoft Azure Sphere is an appliance from Microsoft USA that is used to provide security in cloud environments. A code execution vulnerability exists in Microsoft Azure Sphere version 20.07, which stems from the Regular Signed Code Execution feature allowing arbitrary code execution. An attacke...

Microsoft Azure Sphere Denial of Service Vulnerability (CNVD-2020-73757)

Microsoft Azure Sphere is an appliance from Microsoft USA that is used to provide security in cloud environments. A denial of service vulnerability exists in Microsoft Azure Sphere version 20.05, which stems from the asynchronous ioctl feature of Microsoft Azure Sphere 20.05. An attacker could...

CVE-2020-35608

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AFPACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses...

CVE-2020-35609

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability...

CVE-2020-35609

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability...

CVE-2020-35608

A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AFPACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses...

Denial of service

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability...